Monitors ransomware victims, threat groups, leak-site activity, and newly disclosed ransomware incidents.
2844 articles
The Lynx ransomware group claims on its leak site that it breached Keller Polska and Lion of Africa Insurance, alleging exposure of internal documents, presentations, client references, project data, calendars and staff directories. The claims are unverified.
A ransomware monitoring post says RansomHouse claimed an attack on French ticketing company Irec Sas. The claim is unconfirmed; the post provides no independent evidence of impact.
DragonForce claims it breached Phoenix Environmental Laboratories and exfiltrated 1.62 TB of files, including personal information, employee investigation reports and customer financial records. The article provides no independent confirmation.
RMZ Oilfield Engineering in Singapore is listed in a ransomware claim attributed to Qilin. The post alleges encrypted systems and possible data exfiltration, but says the claims are unconfirmed.
DragonForce claims it breached Phoenix Environmental Laboratories’ network and encrypted sensitive data. The claim is unverified; ransomware.live attributes it to the group’s leak site.
Thegentlemen allegedly targeted Canadian manufacturer ControlGMC and threatened to leak or encrypt sensitive production data. The claim is unconfirmed and was attributed to the group’s leak site and ransomware.live monitoring.
AiLock claims it stole 129GB of data from England Hockey and threatens to publish it unless a ransom is paid. England Hockey is investigating with external specialists and authorities; a breach has not been confirmed.
Ransomware.live lists a thegentlemen claim against St Fabian Catholic Church and School in Michigan, alleging compromised systems and demanding ransom for decryption and to prevent data exposure. The claim is unconfirmed.
A ransomware.live monitoring record attributes a ransomware claim against Australian IT services company Einstein Technology to thegentlemen. The claim is unconfirmed.
A ransomware claim attributed to Qilin lists U.S. technology company Silvon Software as a target. The claim and its details remain unconfirmed; no additional information is provided.
A ransomware.live monitoring record attributes a ransomware claim against Syed Professional Services to Qilin. The claim is unverified; no country or further incident details are provided.
Qilin claims it compromised TDS Construction in the US, encrypted critical systems, and will publish allegedly stolen data unless paid. The monitoring post says the claim is unconfirmed.
RansomHouse claims it breached Bioptik Technology Inc. in Taiwan, holds its data and critical systems, and demands a ransom while threatening public release. The claim is unverified; listed publication and discovery dates are Feb. 26 and Mar. 12, 2026.
Akira claims it breached Mexico-based Mh Soluciones and threatens to publish 85 GB of data, allegedly including employee identity documents, project records, contracts and client information. The claim is unverified.
Dragonforce claims it compromised Advanced Rehabilitation Technology and is demanding a ransom to prevent the release of sensitive project data. The monitoring post says the claim is unconfirmed.
Handala claims it accessed Raz Zimmt’s inbox and more. A ransomware.live listing attributes the claim to Handala’s post and gives March 12, 2026 as its publication date; the listing says it cannot confirm the claim.
NightSpire claims it compromised NIXVAL IT Infrastructure and lists the company on its extortion portal. The portal shows “TIME UP” and says data is unavailable; the nature and volume of any exposed information are unclear.
Qilin claims it breached Fortress Systems and Arimex Importadora and lists allegedly stolen financial records, bank statements, loan documents, invoices and SGS test reports. The claims are unverified in the article.
SpaceBears claims it breached AbelZeta Pharma and exfiltrated over 170,000 files and 670+ archives. The alleged data includes experimental research and documentation potentially related to partners and investors; the claims are unconfirmed in the article.
AiLock claims it breached England Hockey, but the claim is unconfirmed and the group has not disclosed what data was allegedly taken. Its leak site lists publication as “Coming soon.”
Ransomware.live lists Fortress Systems as a Qilin ransomware claim; the group reportedly claims file encryption and possible data exfiltration, with ransom demands. The information is unconfirmed, and no further details are available.
AiLock claims it compromised England Hockey and threatens encryption and data leaks unless a ransom is paid; the post also alleges service disruption. The claims are unconfirmed.
A ransomware[.]live-monitored post attributes to spacebears a claim involving AbelZeta Pharma, including over 170,000 files and 670+ archives. The information is unconfirmed; no official response is included.
A ransomware[.]live monitoring post attributes an unverified claim to ShinyHunters that Aura Group, Inc. has over 2 million records containing PII and internal data, with a March 14, 2026 deadline to contact the group before an alleged leak.
